Privacy Policy
Last updated: 4 November 2026.
This policy explains how TechinSecurity handles personal data when you use techinsecurity.com, as required by the EU General Data Protection Regulation (GDPR). We collect very little, so it is short.
Who is responsible for your data
The data controller is TechinSecurity. For anything related to this policy or your data, email [email protected].
What we collect, why, and our legal basis
When you use the contact form. We receive your name, email address, your company if you give one, and your message. We use them only to reply and to handle your enquiry. Our legal basis is Article 6(1)(b) GDPR where you are asking about working with us, and otherwise Article 6(1)(f), our legitimate interest in answering the people who contact us.
You do not have to give us this data, but we cannot reply without a way to reach you. Please do not send special category data, passwords or other secrets through the form.
When you visit any page. Our servers record your IP address, browser type, the page requested and the time. We need this to deliver the site, keep it secure and investigate abuse. Our legal basis is Article 6(1)(f), our legitimate interest in running a secure website.
To limit spam. When you send the form, we keep a one-way scrambled key derived from your IP address for one hour, so we can limit how many messages are sent. We do not store the IP address with it. Our legal basis is Article 6(1)(f), our legitimate interest in preventing abuse.
We do not sell your data, use it for marketing, or make decisions about you by automated means, including profiling.
Cookies and tracking
This site sets no cookies for visitors and uses no similar technologies, so there is no cookie banner. We use no analytics, advertising or social media trackers, and our fonts and images are served from our own site. Only people who log in to manage the site receive a strictly necessary login cookie.
Who receives your data
Only staff who need it, and service providers acting on our instructions under a data processing agreement: our hosting, email and network security providers. We disclose data to authorities only where the law requires it.
Transfers outside the EEA
We aim to keep your data in the European Economic Area. If a provider processes it elsewhere, we rely on a European Commission adequacy decision or on Standard Contractual Clauses. You can ask us for details or a copy of these safeguards.
How long we keep it
- Enquiries: as long as needed to handle them, and no more than two years after our last contact, unless we start working together or the law requires longer.
- Server logs: up to 30 days, unless needed longer to investigate a specific security incident.
- The spam-limiting key: one hour.
Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- receive data you gave us in a portable format, where this applies;
- object at any time to processing based on our legitimate interests;
- withdraw consent at any time, where we rely on it, without affecting earlier processing.
To use any of these rights, email [email protected]. It is free, and we will respond within one month. We may need to confirm your identity first.
You also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live, work, or where you believe the problem happened. You can find yours on the European Data Protection Board’s list.
Security
We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections and restricted access. To report a vulnerability, see our security.txt.
Changes to this policy
If we change this policy, we will publish the new version here and update the date at the top.